This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WXuK_m3o3Ti1dAOnyzkwkGpbfuI.roa File: WXuK_m3o3Ti1dAOnyzkwkGpbfuI.roa (raw, json) Hash identifier: //HfiWJTnMoglZOzWdOD3ouiXyquBPux0DDBeyVRJzQ= Subject key identifier: 59:7B:8A:FE:6D:E8:DD:38:B5:74:03:A7:CB:39:30:90:6A:5B:7E:E2 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF53412FBB978FC0D7282975720BB Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WXuK_m3o3Ti1dAOnyzkwkGpbfuI.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201575 IP address blocks: 89.36.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f5:34:12:fb:b9:78:fc:0d:72:82:97:57:20:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597b8afe6de8dd38b57403a7cb3930906a5b7ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:de:1e:77:23:b4:64:be:6b:ef:27:83:52: 14:d7:03:28:e3:d9:3c:ba:94:80:ca:3e:2e:2c:99: 14:bd:ea:78:85:48:9c:4a:4a:42:88:04:68:3a:47: da:64:47:00:74:ed:01:77:69:39:4d:12:a7:c9:4b: 13:d1:ef:ee:18:fe:11:be:f3:f4:03:44:1f:06:4b: 1c:ac:c3:cd:ed:71:65:68:21:22:1b:8a:bc:ea:ac: ab:f4:e2:b4:f3:80:b7:10:3d:ba:65:9c:f3:63:44: 4c:0c:13:70:0b:32:cb:26:61:6c:dd:29:19:28:b8: 1f:85:98:d8:32:e1:47:fe:fe:7b:74:09:33:a6:53: e2:6c:d6:a9:ef:d4:34:43:fc:92:f5:e0:91:16:58: 4c:83:9e:e4:ce:07:01:f9:e7:6c:23:34:58:ff:fb: 33:f6:b1:50:0a:7c:a3:63:09:1a:9e:4f:1d:51:27: 7e:1d:c4:f3:25:ea:83:5e:64:98:44:61:34:e1:16: 9e:28:45:62:33:88:98:73:30:8a:ac:53:4c:05:10: 54:a6:95:d0:eb:66:ae:60:1c:04:53:f2:21:56:b6: 45:a2:11:21:8b:2f:ac:f5:13:56:08:e0:7f:58:b4: 1f:41:6d:99:5a:28:b5:83:95:d7:ed:b6:2e:56:f0: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7B:8A:FE:6D:E8:DD:38:B5:74:03:A7:CB:39:30:90:6A:5B:7E:E2 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WXuK_m3o3Ti1dAOnyzkwkGpbfuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.137.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ce:e5:41:4d:5c:94:ba:97:ca:81:75:b1:19:6a:0a:a7:4c: c2:ba:f6:16:2c:c5:03:f1:4a:5a:67:32:93:0e:2f:0e:7e:a0: 41:02:38:ba:a4:c9:de:6c:b7:e5:93:8f:32:1c:8b:c4:cc:66: e8:58:36:ca:11:0d:da:b1:2b:31:9a:f9:5f:a8:04:d0:28:3f: 23:34:d1:a7:92:7a:67:86:5d:fe:f1:ca:52:53:4c:15:f9:cf: 61:64:04:a1:c5:a5:56:15:f5:30:3c:cc:e0:51:59:96:26:6e: f8:c4:87:a1:8a:0e:65:f5:3b:2a:a2:7a:8c:bb:2e:54:08:73: f8:4f:fb:64:e2:87:20:bd:21:5e:99:c3:1b:d8:45:fe:86:78: 1c:30:85:4b:8b:c4:81:25:86:1d:cd:f0:c4:e2:5e:e9:60:5c: 2e:be:da:a7:b2:f9:10:8a:de:47:6c:18:87:66:75:63:bc:07: 41:41:8d:f7:6f:aa:56:f3:2e:e8:e2:b0:b9:7d:d1:15:33:d2: c3:42:94:2d:b2:ab:d3:a3:24:ec:80:c3:9b:4a:60:bf:8e:9a: a7:b7:2f:05:48:f9:07:bf:00:d6:c8:5e:86:da:7b:64:93:a0: b2:bf:0e:df:3e:31:73:f9:ed:7c:44:d6:05:97:73:a5:83:b1: bb:a1:3b:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffU0Evu5ePwNcoKXVyC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTdiOGFmZTZkZThkZDM4YjU3NDAzYTdjYjM5MzA5MDZhNWI3ZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuneHncjtGS+a+8ng1IU1wMo49k8 upSAyj4uLJkUvep4hUicSkpCiARoOkfaZEcAdO0Bd2k5TRKnyUsT0e/uGP4RvvP0 A0QfBkscrMPN7XFlaCEiG4q86qyr9OK084C3ED26ZZzzY0RMDBNwCzLLJmFs3SkZ KLgfhZjYMuFH/v57dAkzplPibNap79Q0Q/yS9eCRFlhMg57kzgcB+edsIzRY//sz 9rFQCnyjYwkank8dUSd+HcTzJeqDXmSYRGE04RaeKEViM4iYczCKrFNMBRBUppXQ 62auYBwEU/IhVrZFohEhiy+s9RNWCOB/WLQfQW2ZWii1g5XX7bYuVvDH3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFl7iv5t6N04tXQDp8s5MJBqW37iMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvV1h1S19tM28zVGkxZEFPbnl6a3drR3BiZnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSSJMA0G CSqGSIb3DQEBCwUAA4IBAQAPzuVBTVyUupfKgXWxGWoKp0zCuvYWLMUD8UpaZzKT Di8OfqBBAji6pMnebLflk48yHIvEzGboWDbKEQ3asSsxmvlfqATQKD8jNNGnknpn hl3+8cpSU0wV+c9hZAShxaVWFfUwPMzgUVmWJm74xIehig5l9TsqonqMuy5UCHP4 T/tk4ocgvSFemcMb2EX+hngcMIVLi8SBJYYdzfDE4l7pYFwuvtqnsvkQit5HbBiH ZnVjvAdBQY33b6pW8y7o4rC5fdEVM9LDQpQtsqvToyTsgMObSmC/jpqnty8FSPkH vwDWyF6G2ntkk6Cyvw7fPjFz+e18RNYFl3Olg7G7oTse -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:37 2026 by rpki-client